Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

The device using lsusb: Bus 001 Device 002: ID 1235:8212 Focusrite-Novation Scarlett 4i4 USB

So how can i do this ? I can see interfaces usbmon1,usbmons2... but i dont know which device, what filter newbie here.

"Bus 001" means that it's on bus 1; you would sniff on usbmon1 to capture traffic to and from that device, as that's the "bus 1" device.

Also if i start a windows 10 guest vm with virtualbox, id like how to capture traffic in the vm.

That's an unrelated question; ask it separately.